Perplexity has released SPACE’s source code for isolated agent execution. Each environment runs in a small virtual machine with its own operating system. An external control plane manages lifecycle, networking and platform-held credentials.
The repository and documentation are public. SPACE supports pause, resume, recovery, snapshots and session branching. Perplexity says all Computer sessions have used it since July; October’s event is the source release.
Perplexity reports no VM-to-host escape in 108 evaluation attempts, but some attempts bypassed network restrictions before fixes. That does not prove invulnerability. Check repository licenses and supported configurations rather than inferring a particular license from “open source.”
Agent security depends on the surrounding system as well as model-alignment promises.